Personal Data Protection Policy

Personal Data Protection Policy

The website accessible at accro.fr is published by the company NxtFood SAS.

As NxtFood SAS is committed to respecting the rules on personal data protection, this website has been developed in compliance with General Data Protection Regulation No. 2016/679 and the so-called “Data Protection Act” of 6 January 1978 in its latest version.

NxtFood SAS undertakes to ensure that your personal data is collected and processed in a lawful and transparent manner.

Definitions

  • Customer: Any professional or legally capable natural person within the meaning of Articles 1123 et seq. of the Civil Code, or any legal entity, who visits the Site subject to these general terms and conditions.
  • Services: accro.fr makes available to Customers:
  • Content: All elements constituting the information present on the Site, including texts, images, and videos.
  • Customer Information: Hereinafter referred to as “Information(s)”, corresponding to all personal data that may be held by accro.fr for the management of your account, customer relationship management, and for analysis and statistical purposes.
  • User: Any internet user connecting to and using the aforementioned site.
  • Personal Information: “Information that, in any form whatsoever, directly or indirectly, allows the identification of the natural persons to whom it applies” (Article 4 of Law No. 78-17 of 6 January 1978).

The terms “personal data”, “data subject”, “processor” and “sensitive data” have the meaning defined by the General Data Protection Regulation (GDPR: No. 2016-679).

1. Personal Data Management

1.1 Controller of Personal Data Collection

For Personal Data collected in connection with the creation of the User’s personal account and their browsing on the Site, the controller of Personal Data is: NxtFood. NxtFood is represented by Valérie Mirrione, its legal representative.

As the controller of the data it collects, NxtFood undertakes to comply with the applicable legal framework. It is the Customer’s responsibility in particular to establish the purposes of its data processing, to provide its prospects and customers, based on the collection of their consent, with complete information on the processing of their personal data, and to maintain a processing register that accurately reflects reality.

Whenever NxtFood processes Personal Data, NxtFood takes all reasonable steps to ensure the accuracy and relevance of the Personal Data in relation to the purposes for which NxtFood processes it.

1.2 Purposes of Data Collection

NxtFood may process all or part of the data:

  • To respond to your message and process your request
  • To improve navigation on the Site: connection and usage data
  • To carry out performance, traffic and audience measurements
  • To prevent and combat computer fraud (spamming, hacking, etc.): computer hardware used for browsing, IP address, password (hashed)
  • To send you information related to our business that may be of interest to you
  • To personalise the content displayed
  • To enhance your advertising experience

NxtFood does not sell your personal data, which is therefore used only out of necessity or for statistical and analytical purposes.

1.3 Right of Access, Rectification and Objection

In accordance with applicable European regulations, users of the accro.fr website have the following rights:

  • Right of access (Article 15 GDPR) and rectification (Article 16 GDPR), updating, and completion of Users’ data; right to lock or erase Users’ personal data (Article 17 GDPR) when it is inaccurate, incomplete, ambiguous, outdated, or when its collection, use, disclosure or storage is prohibited
  • Right to withdraw consent at any time (Article 13-2c GDPR)
  • Right to restriction of processing of Users’ data (Article 18 GDPR)
  • Right to object to the processing of Users’ data (Article 21 GDPR)
  • Right to portability of data provided by Users, where such data is subject to automated processing based on their consent or on a contract (Article 20 GDPR)
  • Right to determine what happens to Users’ data after their death and to choose to whom ACCRO must (or must not) communicate their data to a previously designated third party

As soon as NxtFood becomes aware of a User’s death, and in the absence of instructions from them, ACCRO undertakes to destroy their data, unless its retention is necessary for evidentiary purposes or to fulfil a legal obligation.

If the User wishes to know how NxtFood uses their Personal Data, requests rectification, or objects to its processing, the User may contact NxtFood in writing at the following address: Nxtfood SAS – Legal Department, 420 Rue de Quiéry, 62490 Vitry-en-Artois

In this case, the User must indicate the Personal Data they wish NxtFood to correct, update or delete, clearly identifying themselves with a copy of a valid ID document (national identity card or passport).

Requests for deletion of Personal Data will be subject to the obligations imposed on NxtFood by law, particularly regarding the retention or archiving of documents. Finally, users of the accro.fr website may lodge a complaint with the supervisory authorities, in particular the CNIL (https://www.cnil.fr/fr/plaintes).

1.4 Non-disclosure of Personal Data

NxtFood undertakes not to process, host or transfer the Information collected from its Customers to a country outside the European Union or recognised as “inadequate” by the European Commission without first informing the customer. Nevertheless, NxtFood remains free to choose its technical and commercial subcontractors, provided they offer sufficient guarantees with regard to the requirements of the General Data Protection Regulation (GDPR: No. 2016-679).

NxtFood undertakes to take all necessary precautions to preserve the security of the Information and, in particular, to ensure that it is not communicated to unauthorised persons. However, if an incident affecting the integrity or confidentiality of the Customer’s Information comes to NxtFood’s attention, NxtFood must inform the Customer as soon as possible and communicate the corrective measures taken. Furthermore, NxtFood does not collect any “sensitive data”.

The User’s Personal Data may be processed by NxtFood subsidiaries and subcontractors (consumer services), exclusively for the purposes of this policy.

Within the limits of their respective roles and for the purposes set out above, the main parties likely to have access to NxtFood Users’ data are primarily our consumer service agents:

Evidence Santé Le Trèfle, 34 place de la Gare, 53000 Laval, France — accro@infos-contact.fr

1.5 Types of Data Collected

Regarding users of an accro.fr website, we collect the following data, which is essential for the operation of the service and will be retained for a maximum period of 3 years after the end of the contractual relationship:

  • Last name
  • First name
  • Email
  • Phone number
  • Postal address
  • Reason for the request

NxtFood also collects information to improve the user experience and provide contextualised advice: analytical cookies (Google Analytics, Facebook pixel). This data is retained for a maximum period of 13 months after the end of the contractual relationship.

2. Incident Notification

Regardless of the efforts made, no method of transmission over the Internet and no method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

If we became aware of a security breach, we would notify the affected users so that they could take appropriate action. Our incident notification procedures take into account our legal obligations, whether at national or European level. We are committed to fully informing our customers of all matters relating to the security of their account and to providing them with all the information necessary to help them meet their own regulatory reporting obligations.

No personal information of the accro.fr website user is published without the user’s knowledge, exchanged, transferred, assigned or sold on any medium to third parties. Only in the event of an acquisition of accro.fr and its rights would the said information be transferred to the potential acquirer, who would in turn be bound by the same obligation of retention and modification of data with respect to the accro.fr website user.

Security

To ensure the security and confidentiality of Personal Data, NxtFood uses networks protected by standard measures such as firewalls, pseudonymisation, encryption and passwords.

When processing Personal Data, NxtFood takes all reasonable measures to protect it against any loss, misuse, unauthorised access, disclosure, alteration or destruction.

3. Hyperlinks, “Cookies” and Internet Tags

The accro.fr website contains a number of hyperlinks to other sites, set up with NxtFood’s authorisation. However, NxtFood is not in a position to verify the content of those sites and will therefore accept no responsibility in this regard.

Unless you choose to disable cookies, you agree that the site may use them. You may disable these cookies at any time and free of charge using the opt-out options provided and set out below, noting that doing so may reduce or prevent access to all or part of the Services offered by the site.

3.1 Cookies

A “cookie” is a small piece of information sent to the User’s browser and stored on the User’s device (e.g. computer, smartphone) (hereinafter “Cookies”). This file contains information such as the User’s domain name, internet service provider, operating system, and the date and time of access. Cookies cannot under any circumstances damage the User’s device.

NxtFood may process information about the User’s visit to the Site, such as pages viewed and searches carried out. This information enables NxtFood to improve the content of the Site and the User’s browsing experience.

As Cookies facilitate navigation and/or the provision of services offered by the Site, the User may configure their browser to allow them to decide whether or not to accept them, so that Cookies are either stored on their device or rejected, either systematically or depending on their source. The User may also configure their browser so that they are asked on a case-by-case basis whether to accept or refuse Cookies before a Cookie is stored on their device. NxtFood informs the User that, in this case, some features of their browser software may not be available.

If the User refuses to allow Cookies to be stored on their device or browser, or if the User deletes those already stored, the User is informed that their browsing and experience on the Site may be limited. This may also be the case when NxtFood or one of its service providers is unable to recognise, for technical compatibility purposes, the type of browser used by the device, the language and display settings, or the country from which the device appears to be connected to the Internet.

Where applicable, NxtFood disclaims all liability for the consequences related to the degraded functioning of the Site and any services that may be offered by NxtFood, resulting from (i) the User’s refusal of Cookies, or (ii) NxtFood’s inability to store or access the Cookies necessary for their operation due to the User’s choice.

Cookie management and User preferences vary depending on the browser. This is described in the browser’s help menu, which will explain how the User can change their Cookie preferences.

At any time, the User may choose to express and modify their Cookie preferences. NxtFood may also call upon external service providers to help collect and process the information described in this section.

Finally, by clicking on the social media icons for Instagram, Facebook, LinkedIn and YouTube on the accro.fr website, and if the User has accepted the use of cookies by continuing to browse accro.fr, Instagram, Facebook, LinkedIn and YouTube may also place cookies on your devices (computer, tablet, mobile phone).

These types of cookies are only placed on your devices subject to your consent, by continuing to browse the accro.fr website. However, the User may withdraw their consent to NxtFood placing this type of cookie at any time.

3.2 Internet Tags

NxtFood may occasionally use internet tags (also known as “tags”, action tags, one-pixel GIFs, transparent GIFs, invisible GIFs and one-to-one GIFs) and deploy them through a partner specialising in web analytics, who may be located (and therefore store the corresponding information, including the User’s IP address) in a foreign country.

These tags are placed both in online advertisements enabling internet users to access the Site, and on the various pages of the Site.

This technology enables NxtFood to evaluate visitor responses to the Site and the effectiveness of its actions (for example, the number of times a page is opened and the information viewed), as well as the User’s use of the Site.

The external service provider may collect information about visitors to the Site and other websites through these tags, compile reports on Site activity for NxtFood, and provide other services relating to the use of the Site and the internet.

4. Applicable Law and Jurisdiction

Any dispute relating to the use of the accro.fr website is subject to French law. Except where prohibited by law, exclusive jurisdiction is attributed to the competent courts of the Lille Métropole area.

For any questions regarding this document, please contact us at contact@nxtfood.fr